Lucene search

K
cve[email protected]CVE-2004-1601
HistoryFeb 20, 2005 - 5:00 a.m.

CVE-2004-1601

2005-02-2005:00:00
web.nvd.nist.gov
22
cve-2004-1601
coolphp
directory traversal
remote attackers
arbitrary files
local php scripts

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.8%

Directory traversal vulnerability in index.php in CoolPHP 1.0-stable allows remote attackers to access arbitrary files and execute local PHP scripts via a … (dot dot) in the op parameter.

Affected configurations

NVD
Node
coolphpcoolphp_web_portalMatch1.0_stable

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.028 Low

EPSS

Percentile

90.8%

Related for CVE-2004-1601